Asked here, answered here.
There is a very good chance that you are seeing the effects of a hijackware
infection!
NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!
Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1
Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/
Otherwise...
1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx
NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.
2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm
2b. Vista or Win7 (but not Vista 64-bit or Win7 64-bit) => Run this scan
instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm
3. Now post the requested information (logs, etc.) in your own, new thread
in one (only) of the following recommended forums for assistance by an
expert in such matters. DO NOT SKIP THIS STEP!!
• SpywareHammer: Malware Removal
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0
• Spyware Warrior: Help with spyware removal
http://www.spywarewarrior.com/viewforum.php?f=5
• DSL Reports: Security Cleanup
http://www.dslreports.com/forum/cleanup
• Bluetack: Malware Removal
http://www.bluetack.co.uk/forums/index.php?showforum=172
• AumHa: Malware Removal
http://aumha.net/viewforum.php?f=30
If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002
me Dummy I think wrote:
> when i try system restore it tells me that it has been tuned off by group
> policy, when i try to run Redegit it tells me Registry editing has been
> disabled by administrator-user account says i am the administrator the
> only
> prgram I have deleted was the ASP.net from the users account
> ---HEEEEELLPPPPPPP-plz send the answer to maninblack4r@yahoo.com